Imizila edonswa yi-OpenVPN ayifakwa: isikhathi, amalungelo noma inqubomgomo

Iseva ithi idonse umzila, iklayenti ithi ixhunyiwe, futhi indawo okudingeka iyofika ayikafinyeleleki. Izimbangela ezintathu zenza leso sithombe ncamashi. Ukwengezwa komzila kwenzeka ngaphambi kokuba idivayisi ibe khona, iklayenti lalingenawo amalungelo okushintsha ithebula, noma inqubomgomo yatshela iklayenti ukuthi lizidele izinketho ezidonsiwe.

Ngaphandle zibukeka zifana futhi zidinga ukulungiswa okuhlukene. Funda ilogi yeklayenti lapho kuthathwa khona isinqumo somzila.

Fakazisa ukuthi umzila awukho, hhayi nje ukuthi uphukile

Qala ngokufakazisa ukuthi umzila awukho esikhundleni sokuthi uphukile. Ku-Linux, ip route show dev tun0 kubala lokho iklayenti elikufake kudivayisi yomhubhe. Ku-Windows, route print noma Get-NetRoute kukhombisa okufanayo ngendlela yethebula.

Umzila okhona kodwa ongadlulisi ithrafikhi kuyinkinga ehlukile. Lokho kuhambisa uphenyo emikhubeni yokudlulisa nasezindongeni zomlilo, hhayi ekufakweni komzila.

Isikhathi: ukwengezwa kwenzeka ngaphambi kokuba idivayisi ibe khona

Iklayenti lihlaziya i-PUSH_REPLY yeseva ngemva kokuba isiteshi sokulawula siphakamile nangemva kokuthi lilungise isixhumanisi. Yilapho kuphela lapho lithinta khona ithebula lomzila, ngayiphi indlela imfakazelo eyinikezayo. I-Linux idlula ku-netlink; i-Windows isebenzisa i-API edinga ithokheni ephakanyisiwe. Iskripthi noma iklayenti elengeza imizila ngokushesha ngemva kokufunda ukucushwa kungenzeka kusebenze ngaphambi kokuba idivayisi ye-TUN/TAP ibe khona, futhi umongo wenqaba ukwengezwa.

Umcintiswano ofanayo uchaza ukuthi kungani umzila obhalwe ngesandla usebenza kuyilapho othomathikhi ungenzi: lapho uwubhala, isixhumanisi sesivele siphakamile.

route-delay ikhona yale simo, futhi route-up ibala iskripthi esisebenza ngemva kokulungiswa kwesixhumanisi nemizila. Beka imizila encike ekhelini lomhubhe kulelo hook, hhayi esigabeni sokuqala.

Amalungelo: ubani angashintsha ithebula

Ukushintsha ithebula lomzila le-Windows kudinga ithokheni ephakanyisiwe. I-GUI eqaliswe umsebenzisi ojwayelekile ingasetha ikheli le-adaptha ngokusebenzisa insiza kodwa isehluleke ukwengeza umzila. Ilogi khona-ke ikhombisa iphutha elifana nokufinyelela kunqatshiwe esikhundleni sokudonsa okungekho.

Ukuqalisa i-GUI njengomphathi, noma ukusebenzisa iklayenti elisekelwe ensizeni, kushintsha lowo mphumela. Umsebenzi ohleliwe oqalisa iklayenti ngaphandle kwethokheni edingekayo awushintshi.

Ngaphambi kokushintsha noma yini, hlola ukuthi iklayenti lisebenza ngaluphi i-akhawunti ngempela. Inguqulo nemodi yensiza zinquma ukuthi yiziphi izimbangela ezingenzeka, ngakho bhala zombili eceleni kokuphuma komzila.

Inqubomgomo: imizila edonsiwe ingalahlwa ngamabomu

route-nopull yenza iklayenti lizidele imizila edonswa iseva, kuhlanganise nomzila ojwayelekile odonsiwe, kuyilapho ikheli lomhubhe lisamukelwa. Izinketho ze-DNS ne-DHCP ezidonsiwe ziyalahlwa ngumyalelo ofanayo. Iklayenti elinjalo alilona elinephutha; lilindele imigqa yomzila ecacile ekucushweni kwalo.

route-noexec iwukulawula okuhlukile: ivimbela ngokuphelele iklayenti ekwenzeni izinguquko zomzila. Itopology iklayenti elingakwazi ukuyihlela ingase ikhiphe umphumela ofanayo, futhi umzila ubhalwa njengonqatshiwe hhayi njengowengeziwe. Funda umugqa welogi obika isinqumo esikhundleni sokuqagela ukuthi iyiphi kwezintathu esebenzayo. Bese uhlola iphrofayili esebenzayo, ngoba umngenisi noma ithuluzi lokuphatha lingengeza izinketho umsebenzisi angakaze azihlele.

Iphrofayili ebukeka ihlanzekile kumhleli wombhalo ingase isagqama umyalelo owengeziwe ngesikhathi sokusebenza.

Qhathanisa uhlu lokudonsa nethebula

Ngemva kokuxhuma, beka uhlu lokudonsa lweseva eceleni kwethebula leklayenti. Ku-Linux lokho yi-ip route show dev tun0; ku-Windows, route print noma Get-NetRoute. Uma umzila ungekho, lungisa ukufakwa kuqala. Uma ukhona futhi ithrafikhi ihluleka, dlulela kunqubomgomo yokudlulisa nendonga yomlilo.

Bhala inguqulo yeklayenti, i-akhawunti elisebenza ngayo nokuthi lisekelwe ensizeni yini. Lezo zinto ezintathu zitshela umuntu olandelayo ukuthi yiziphi izimbangela ezikhishiwe.